Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa
File:                     3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          OZYmnGo8Jfv2/ukCpxq+u5cezBQ0qCjkkXXQQUzZIzQ=
Subject key identifier:   22:6B:01:A7:90:06:CC:2A:AC:C1:C7:88:C5:E9:87:DE:1C:DC:E8:F7
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       221B7E012AF8114BAC7022C6060D2BC9E5E127BC
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 18:17:04 +0000
ROA not before:           Tue 05 Mar 2024 18:12:04 +0000
ROA not after:            Tue 04 Mar 2025 18:17:04 +0000
asID:                     7418
IP address blocks:        200.113.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1b:7e:01:2a:f8:11:4b:ac:70:22:c6:06:0d:2b:c9:e5:e1:27:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Mar  5 18:12:04 2024 GMT
            Not After : Mar  4 18:17:04 2025 GMT
        Subject: CN=226B01A79006CC2AACC1C788C5E987DE1CDCE8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:37:89:49:89:f3:f2:1f:9c:2d:10:f3:f9:04:
                    28:51:6a:8e:6a:fa:d5:eb:fa:f7:f8:1e:47:1f:59:
                    9c:ed:82:6b:d0:55:c5:bf:46:55:88:20:55:23:ba:
                    0a:fe:d0:ed:2d:b6:dd:88:60:5f:63:f5:89:0e:62:
                    14:d0:22:e3:ed:0e:b1:83:8a:48:ad:d5:0e:46:32:
                    ba:74:06:b7:87:fa:c1:8c:4c:5e:85:5f:67:14:a1:
                    21:06:57:8a:18:f3:63:d5:5c:cc:11:5e:d9:92:e9:
                    fa:45:cc:64:35:59:21:3f:0e:df:8e:34:f2:4b:c8:
                    85:de:e3:5a:28:f8:61:56:47:cc:f6:d3:c7:fa:cb:
                    41:2c:78:73:d1:fc:06:11:70:9c:1f:9d:3e:7f:77:
                    51:a9:f8:7f:da:83:ed:0f:8a:3a:4e:89:c0:9a:59:
                    96:80:8e:9c:8f:83:df:cc:72:43:9c:3b:64:a2:cb:
                    61:f4:50:c1:1d:b6:71:87:bb:b8:2b:fd:ef:86:0a:
                    86:17:72:e2:a0:bd:b7:b8:ad:1c:58:e1:f6:56:07:
                    75:49:78:58:13:12:31:2f:b0:26:8b:7c:d3:e7:b5:
                    c4:91:0f:42:a7:7d:4c:3d:92:0c:14:d5:df:59:e3:
                    18:77:b1:9a:f7:9b:b9:b9:5b:70:51:ce:ce:71:e0:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6B:01:A7:90:06:CC:2A:AC:C1:C7:88:C5:E9:87:DE:1C:DC:E8:F7
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e3132382e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:7f:67:d0:cb:db:dd:f7:13:64:66:07:40:bf:42:97:7b:
         bd:5a:12:44:02:61:0c:8d:21:6b:4b:72:87:24:7b:1c:14:3a:
         97:6a:57:d6:a6:86:52:ff:d4:cf:8c:76:dc:6f:88:45:62:72:
         a4:c3:31:a6:74:8a:10:2e:b3:3a:a5:6f:63:8c:6e:16:b1:a9:
         a6:ca:0c:d5:7f:10:fe:8f:28:78:f5:2d:30:29:82:51:ef:e1:
         a5:d6:60:c6:3b:fd:bb:01:50:58:85:ac:ab:a3:6a:54:1c:82:
         29:e2:7c:aa:6e:14:0c:59:d6:6f:4b:03:cc:1c:60:df:93:85:
         77:9f:d8:ba:7f:03:0c:71:12:b1:bd:b8:f2:2e:25:93:7f:64:
         cb:66:1a:9a:b6:d1:96:f7:5a:ca:f1:89:b7:d0:08:48:26:ae:
         13:ed:68:0b:40:e6:55:9e:cb:3f:5a:52:ea:bf:a2:a9:f0:fb:
         76:75:5d:52:4d:50:3b:27:d6:e1:16:14:f2:69:a7:6a:ae:f1:
         6f:0b:4b:7b:36:57:70:76:a6:a8:32:f3:ea:92:92:cc:6b:f0:
         2b:9e:58:e8:27:3a:49:86:d1:74:7e:66:ac:d6:bf:66:26:48:
         d0:d5:49:88:8a:a5:3c:ca:45:f0:9a:00:44:57:7c:71:b5:9f:
         b3:98:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org